agentprime: socfortress-copilotEvery new CVE for socfortress-copilot.https://agentprime.io/CVE-2026-61739: SOCFortress CoPilot: Authentication Bypass and Missing Authorization on Velociraptor Sigma Exclusion Rules (Detection Suppression)https://agentprime.io/advisories/CVE-2026-61739/https://agentprime.io/advisories/CVE-2026-61739/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:50:23 GMTCVECVE-2026-61738: SOCFortress CoPilot: Arbitrary Host File Write as Root via Path Traversal in the ScoutSuite GCP Report Upload (RCE)https://agentprime.io/advisories/CVE-2026-61738/https://agentprime.io/advisories/CVE-2026-61738/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:36:10 GMTCVEcriticalCVE-2026-61730: SOCFortress CoPilot: Unauthenticated Exposure of ScoutSuite Reports and Uploaded GCP Service-Account Key via Static Mounthttps://agentprime.io/advisories/CVE-2026-61730/https://agentprime.io/advisories/CVE-2026-61730/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:25:53 GMTCVEcriticalCVE-2026-61729: SOCFortress CoPilot: Hardcoded Default Header Secret - Unauthenticated Active-Response Invocation and Alert Injectionhttps://agentprime.io/advisories/CVE-2026-61729/https://agentprime.io/advisories/CVE-2026-61729/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:24:04 GMTCVEcriticalCVE-2026-61728: SOCFortress CoPilot: Stored comment and SOC-field XSS permits privileged account takeoverhttps://agentprime.io/advisories/CVE-2026-61728/https://agentprime.io/advisories/CVE-2026-61728/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:22:18 GMTCVEcriticalCVE-2026-61708: SOCFortress CoPilot: Cross-Tenant Arbitrary Object-Store Write via the Data-Store Upload Endpoint (customer_user)https://agentprime.io/advisories/CVE-2026-61708/https://agentprime.io/advisories/CVE-2026-61708/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 30 Oct 2026 14:20:17 GMTCVECVE-2026-61707: SOCFortress CoPilot: Stored case-report template injection permits backend code executionhttps://agentprime.io/advisories/CVE-2026-61707/https://agentprime.io/advisories/CVE-2026-61707/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 29 Oct 2026 21:25:01 GMTCVEcriticalCVE-2026-42869: SOCFortress CoPilot: Hardcoded JWT secret allows unauthenticated full admin compromise and lateral movement into all integrated SOC toolshttps://agentprime.io/advisories/CVE-2026-42869/https://agentprime.io/advisories/CVE-2026-42869/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 11 May 2026 18:39:28 GMTCVEcritical